How to break MD5 and other hash functions

How to break MD5 and other hash functions

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Xiaoyun Wang , Hongbo Yu

Venue:	Proc. IACR Eurocrypt 2005
Citations:	150 - 3 self

Versions

Version History

Metadata Version 1

Datum	Value	Source
TITLE	How to break MD5 and other hash functions	INFERENCE
AUTHOR NAME	Xiaoyun Wang	SVM HeaderParse 0.2
AUTHOR AFFIL	Shandong University	SVM HeaderParse 0.2
AUTHOR ADDR	Jinan 250100, China	SVM HeaderParse 0.2
AUTHOR NAME	Hongbo Yu	SVM HeaderParse 0.2
AUTHOR AFFIL	Shandong University	SVM HeaderParse 0.2
AUTHOR ADDR	Jinan 250100, China	SVM HeaderParse 0.2
ABSTRACT	Abstract. MD5 is one of the most widely used cryptographic hash functions nowadays. It was designed in 1992 as an improvement of MD4, and its security was widely studied since then by several authors. The best known result so far was a semi free-start collision, in which the initial value of the hash function is replaced by a non-standard value, which is the result of the attack. In this paper we present a new powerful attack on MD5 which allows us to find collisions efficiently. We used this attack to find collisions of MD5 in about 15 minutes up to an hour computation time. The attack is a differential attack, which unlike most differential attacks, does not use the exclusive-or as a measure of difference, but instead uses modular integer subtraction as the measure. We call this kind of differential a modular differential. An application of this attack to MD4 can find a collision in less than a fraction of a second. This attack is also applicable to other hash functions, such as RIPEMD and HAVAL. 1	SVM HeaderParse 0.2
VENUE	Proc. IACR Eurocrypt 2005	INFERENCE
VENUE TYPE	CONFERENCE	INFERENCE
PAGES	19--35	INFERENCE
CITATIONS	18 found	ParsCit 1.0